Lexmark International, Inc. 1
Lexmark Printers and Multifunction Products:
Hard Disk and Non-Volatile Memory Guide
This guide applies to the following Lexmark devices:
Printers Multifunction Products
C780
X646
C782
X772
C935
X782
T640
X850
T642
X852
T644
X854
X940
X945
March 2011
Version 1.3
Lexmark International, Inc. 2
Overview
Lexmark provides a wide range of printing and imaging devices to help businesses of all
sizes drive greater productivity―from the small business with a handful of employees to
the world's largest enterprises. To meet today’s complex printing requirements. Lexmark
equips its devices with non-volatile memory to store essential system information when
the devices are powered off. In addition, some Lexmark devices may also be equipped
with a hard disk. The hard disk is used to buffer jobs, collate large jobs, or store forms,
fonts or macros. To run some print apps or printer software solutions, a hard disk is
required.
The use of non-volatile memory and hard disks are industry-standard methods for
enhancing the performance of print and imaging devices. This document outlines how
these memory types are implemented in Lexmark devices and the mechanisms that can
be utilized to protect data stored on them.
About Non-Volatile Memory Technology on
Lexmark Printers and MFPs
Lexmark devices use two forms of non-volatile memory: EEPROM and NAND. These
components store the device operating system, device settings information, network
information, embedded solution applications, various scanner settings and bookmark
settings. No user related print, copy and/or scan data is stored in non-volatile memory.
To mitigate the risk of your data being compromised, the following actions can be
performed:
• Information such as device settings can be cleared by restoring the device to its
factory defaults.
• Embedded solutions can be removed by uninstalling the application using the
device’s embedded web server (EWS) under the Embedded Solutions link.
• Certain network information can be removed from the device by unplugging the
device’s network cable and performing an NVRAM reset on the device’s network
card; information can also simply be deleted through the EWS.
• Fax data settings can be cleared from the device by formatting the fax data
partition under the device’s Configuration Menu.
• Other information, such as operating system information, cannot be removed
from the device.
Crushing or shredding the device controller provides the greatest assurance that
sensitive or confidential data does not fall into the wrong hands.
Lexmark International, Inc. 3
About Hard Disk Technology on Lexmark Printers and MFPs
Hard disks on Lexmark devices are designed for device-specific functionality and are not
designed, nor can be used, as long-term storage for items unrelated to print and scan.
The basic architecture of these devices disallows the capability for users to extract
information, create folders, share the hard disk, create a network file share, or FTP
information to the device’s hard disk directly from a client device.
The device hard disk is primarily designed to store print/image data, font data, forms
data, macros, and in some cases, job data. In addition, Lexmark uses hard disks for
temporarily buffering scan, fax, and copy data. In general, print-related data is processed
in Random Access Memory (RAM) unless the job exceeds the amount of RAM on the
device, or if the end user selects the confidential print and/or print and hold feature
enabled through the print driver.
Hard Disk Encryption
Why is Hard Disk Encryption needed?
A common concern for print devices is that residual job data from the print, copy, fax,
and scan processes will not be properly cleared prior to the device being removed from
a secure area and/or decommissioned at the end of life. This concern has led many
customers for look to additional hard disk protection mechanisms outside of disk wiping
to secure information. Hard disk encryption adds an additional layer of security to a
device's hard disk by encrypting all data that may be actively used by the device, sitting
idle on a device, and/or used by the device in a previous job. Disk encryption provides
the comfort that the hard disk can never be used in a device other than the one from
which it was originally encrypted.
How does Hard Disk Encryption work?
Lexmark devices have the ability to encrypt all data on their hard disks to protect it from
malicious access at all times. When this feature is enabled, all data written to the hard
disk is encrypted. This protects not only residual data left over after jobs, but also
protects data actively being used. This prohibits someone from maliciously powering off
the device in the middle of a job and making use of data abruptly left on the hard disk. If
an encrypted hard disk is removed and placed in another Lexmark device with hard disk
encryption enabled, the hard disk will verify its encryption key with the device's
encryption key. If the verified encryption key on the hard disk is different from the
device's encryption key, the device will reformat the hard disk with a new encryption key,
destroying the existing encrypted data on the hard disk.
When hard disk encryption is activated, the encryption key used (128-bit AES symmetric
encryption) is pseudo-randomly generated and stored in a proprietary fashion on the
device. Note that the key is not stored on the hard disk itself, so if the hard disk were
stolen from the device, the contents of the hard disk would remain indecipherable.
When the encryption function is activated, the hard disk is formatted and all data
contained on the hard disk is lost. Encryption is then applied to all data placed on the
hard disk, at all times.
Lexmark International, Inc. 4
Benefits of Hard Disk Encryption
• Increased security of active and residual data.
• The encryption is applied in real time, so there is no delay for cleanup or post-
processing after jobs have completed.
• A dynamically generated encryption key stored on the device (not the hard disk)
makes the data on an encrypted disk useless on any other device. Stealing the
hard disk out of the device will not yield access to the data it contains.
How to Enable Hard Disk Encryption
The Disk Encryption menu can only be accessed by entering the Config Menu at the
Lexmark device control panel.
1. Power off the device.
2. If your device has a touch screen, hold down the 2 and the 6 buttons, while
powering on the device; hold the buttons down until a clock or bar indicator
appears. If your device has a four line LCD display, hold down the check mark
(√) and the right arrow (>), while powering on the device; hold the buttons down
until a clock or bar indicator appears. Once the clock or bar indicator appears,
then you may release the buttons.
3. You should see the Config Menu appear on the device control panel.
4. To locate the Disk Encryption feature, press the down arrow until you see the
feature that displays Disk Wipe. Select this feature.
5. The screen should change to a page that displays the header Disk Encryption.
The screen should only display two functions named Enable and Disable. If you
would like to enable disk encryption, select the Enable function. If you already
have disk encryption enabled and would like to disable the feature, select the
Disable function. Please note either function will erase the contents of the disk.
6. After the appropriate feature has been selected, the screen should change to a
confirmation page that displays the following prompt: Contents will be lost.
Continue? The screen should also display two buttons with YES and NO. If you
want to continue with the disk encryption, select the YES button and the disk
encryption process will start. If you decide not to continue, press the NO button
and you will be placed back to the previous screen.
Lexmark International, Inc. 5
7. When the process finishes, select the Back button.
8. Select the Exit Config Menu button and the device will return to a ready state.
The following graphic will appear when the encryption process is enabled:
The progress bar indicates the overall completion of the entire process by filling
in throughout each separate stage.
The entire process is complete when the progress bar appears completely
shaded and the percentage indicator shows 100%. After completion, the panel
returns to the Disk Encryption menu.
Confirmation of Disk Encryption Activities
The only method to confirm that Hard Disk Encryption has been enabled is via
MarkVision Professional. A plug-in has been developed for MarkVision, which will allow
you to view the status of Hard Disk Encryption on a fleet of devices.
Note: If you remove an encrypted disk from a device and then try to install another disk,
the following message will appear on the device control panel: Disk Corrupted.
Reformat? You can then format the newly installed disk or remove it from the device. If
you choose to reformat the disk, the device will generate a new encryption key, and
encrypt and format the new hard disk. At this point, the data from the previous hard disk
will no longer be accessible by any machine.
Lexmark International, Inc. 6
Hard Disk Wiping
Why is Hard Disk Wiping Important?
Lexmark uses hard disks on our devices to temporarily buffer scan, fax, print, and copy
data that exceeds the amount of Random Access Memory (RAM) installed on the
device. Buffered data is deleted from the hard disk immediately after the original scan,
fax, print, or copy job is complete. Additionally, devices will temporarily hold print jobs on
a hard disk if the confidential print/print and hold features are enabled by the user and
when fax jobs are received and sent. This data is held by the hard disk until the job is
deleted by the end user, the document expires through the job expiration feature, or the
document is printed by the end user.
When a data file is “deleted” from a hard disk, the data that is associated with that file is
not actually deleted. This data remains on the hard disk and with substantial efforts,
theoretically could be recovered. Lexmark devices support a mechanism for protecting
residual data: hard disk wiping. Hard disk wiping actively overwrites the deleted job data
with multiple passes of random data, removing all residue of prior information.
Intended Goals of a Hard Disk Wiping Solution
• Provide an advanced secure deletion solution.
• Ensure the disk wiping feature is efficient.
Benefits of Hard Disk Wiping
The benefits of a hard disk wiping solution include:
• Increased security of residual data.
• Elimination of the need to remove or process the hard disk when the device is to
be retired, recycled, or otherwise removed from a customer’s secure
environment.
There are several circumstances under which Lexmark recommends you erase the
contents of the hard disk components installed in your Lexmark printer or MFP. These
include:
• The printer is being decommissioned
• The printer hard disk is being replaced
• The printer is being moved to a different department or location
• The printer is being serviced by someone from outside your organization
• The printer is being removed from your premises for service
The following section explains the recommended steps to ensure confidential data is
erased.
Lexmark International, Inc. 7
How to Perform a Complete Disk Wipe (Wipe Disk)
The Wipe Disk setting provides you with a tool for erasing all contents of a disk. This
feature can be accessed by entering the device Config Menu at the Lexmark device
control panel. The Wipe Disk function should be used when the Lexmark device is to be
retired, recycled, or otherwise removed from a customer’s secure environment.
Warning: Wipe Disk removes a disk's data in such a way that it cannot be recovered.
The Wipe Disk (Secure) operation is a three-pass overwrite and may take up to nine
hours to complete.
1. Power off the device.
2. If your device has a touch screen, hold down the 2 and the 6 buttons, while
powering on the device; hold the buttons down until a clock or bar indicator
appears. If your device has a four line LCD display, hold down the check
mark (√) and the right arrow (>), while powering on the device; hold the
buttons down until a clock or bar indicator appears. Once the clock or bar
indicator appears, then you may release the buttons.
3. You should see the Config Menu appear on the device control panel.
4. To locate the Wipe Disk feature, press the down arrow until Wipe Disk
appears on the screen. Select Wipe Disk.
5. The screen should change to a page that displays the header Wipe Disk. The
screen should only display two functions, Wipe Disk (Fast) and Wipe Disk
(Secure). Select the feature that you would like to enable.
6. After the appropriate feature has been selected, the screen should change to
a confirmation page that displays the following prompt: Contents will be lost.
Continue? or A secure disk wipe takes many hours and content will be lost.
The confirmation screen will allow you to continue or cancel the wipe disk
operation.
7. When the process finishes, select the Back button.
8. Select the Exit Config Menu button and the device will return to a ready state.
Lexmark International, Inc. 8
Common Criteria Validated Devices with Hard Disks
Lexmark workgroup devices are designed with security options and solutions to help
customers ensure secure management, secure network communications and secure
information storage. As of September 21, 2007, Lexmark has successfully completed
Common Criteria certification for its workgroup monochrome and color laser
multifunction products (devices). Common Criteria is an internationally recognized
standard for security assessment and is used as a third-party validation of the security
functionality of information technology products.
The certification involves rigorous testing and evaluation by the Common Criteria Testing
Laboratory, which is overseen by the National Information Assurance Partnership
(NIAP), a U.S. government initiative. NIAP certification was obtained for the following
Lexmark devices with hard hard disks:
Lexmark X646dte (firmware revision LC2.MC.P239b) Multifunction Printer
Lexmark X646e (firmware revision LC2.MC.P239b) Multifunction Printer
Lexmark X646ef (firmware revision LC2.TI.P239b) Multifunction Printer
Lexmark X772e (firmware revision LC2.TR.P275) Multifunction Printer
Lexmark X850e (firmware revision LC2.BE.P238b) Multifunction Printer
LexmarkX852e (firmware revision LC2.BE.P238b) Multifunction Printer
Lexmark X854e (firmware revision LC2.BE.P238b) Multifunction Printer
Lexmark X940e (firmware revision LC.BR.P060) Multifunction Printer
Lexmark X945e (firmware revision LC.BR.P060) Multifunction Printer
The NIAP also certified six specific security functions on each Lexmark device:
• Fax Communications Control (Separation of Fax and Network Communications)
• User Authentication
• Device Configuration Protection
• Hard Disk Encryption
• Hard Disk Sanitization
• TSF Self Protection (Device Operating System Protections from
Virus/Malware/Hacking/Unauthorized Software/Bypassing Security Functions
through Backdoors)
Validation Report
http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-vr.pdf
Security Target
http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-st.pdf
Validation Certificate
http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-ci.pdf
Lexmark International, Inc. 9
DOD/DOE/NIST Guidelines for Magnetic Media Sanitization
The U.S. Department of Defense clearing and sanitizing matrix (DoD 5220.22-M,
Section 8-306, Maintenance) recommends that the sanitization of a magnetic removable
rigid disk should be done by one of the following:
• Overwrite all addressable locations with a character, its complement, then a
random character and verify.
• Degauss with a Type I degausser.
• Degauss with a Type II degausser.
• Destroy – disintegrate, incinerate, pulverize, shred or melt.
Lexmark’s secure disk wipe uses three overwrite passes with different bit patterns
followed by a verify pass; this is otherwise known as a NIST or U.S. Department of
Defense compliant wipe.
Summary
Lexmark printers and multifunction devices are equipped with non-volatile memory. In
addition, some devices are equipped with internal hard disks. These devices have a
number of standard and advanced security mechanisms to enhance the security of data
that is stored on or passes through them, including:
• Hard disk encryption using the Advanced Encryption Standard (AES), which
provides the following protections:
─ 128-bit AES.
─ When encryption is activated, the encryption key is pseudo-randomly
generated and stored on the printer or device.
─ Encryption applies not only to residual data left over after jobs, but also to
data that is actively being used.
─ Out of service disk wiping, which is designed to completely wipe the
entire contents (active and residual data) of the hard disk and is highly
recommended to be used when the device is taken out of service or
removed from a secure location.
• Destroying the device controller is the best method to ensure that your data can
not be compromised. Destruction can be accomplished using industry approved
methods such as crushing and shredding of the controller.
Copyright © 2011 Lexmark International, Inc. All rights reserved.
Lexmark reserves the right to change specifications or other product information without notice. References in this publication to Lexmark
products or services do not imply that Lexmark intends to make them available in all countries in which Lexmark operates. LEXMARK
PROVIDES THIS PUBLICATION “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. This publication may contain third
party information or links to third party sites that are not under the control of or maintained by Lexmark. Access to any such third party
information or site is at the user’s own risk and Lexmark is not responsible for the accuracy or reliability of any information, data, opinions,
advice or statements made by these third parties. Lexmark provides this information and links merely as a convenience and the inclusion of
such information and/or links does not imply an endorsement. All performance information was determined in a controlled environment.
Actual results may vary. Performance information is provided “AS IS” and no warranties or guarantees are expressed or implied by
Lexmark. Buyers should consult other sources of information, including benchmark data, to evaluate the performance of a solution they are
considering buying.
-
1
-
2
-
3
-
4
-
5
-
6
-
7
-
8
-
9
